Exam CIPT topic 1 question 51 discussion

A. Create a privacy standard that applies to all projects and services. Before implementing specific privacy measures or conducting reviews, it's essential to establish a comprehensive privacy standard that provides a framework for how privacy will be managed across all projects and services. This standard ensures consistency and alignment with privacy principles throughout the organization. Once the standard is in place, you can then move on to setting retention policies, implementing privacy settings, and performing privacy reviews.

A is correct

A is correct

I think A

Performing privacy reviews on new projects constitutes performing DPIAs on new projects, which is a critical element of privacy by design - identifying privacy risks and their impact is the only way to implement safeguards in an early stadium.

Create a privacy standard, page 130 book Privacy in Technology

A is the answer

The problem with A is the word "standard" which are commonly related to ISO stuff. You won't want to implement the same standard for everything as you should consider the aspects of the projects from their conception.

I agree with A. B is factible but not the first thing you would do.

Perhaps "A"? Privacy by Design principle includes: 1.Proactive, not reactive – preventative, not remedial 2.Privacy as the default setting 3.Privacy embedded into design 4.Fully functionality 5.End-to-end security – full life cycle protection 6.Visibility and transparency 7.Respect for user privacy

Why B ?